6,419 results · Feed
-
Medium max 7.5ALSA-2023:2204 5 CVEs
Moderate: Image Builder security, bug fix, and enhancement update
Image Builder is a service for building customized OS artifacts, such as VM images and OSTree commits, that uses osbuild under the hood. Security Fix(es): * golang: archive/tar: unbounded memory consumption when reading headers (CVE-2022-2879) * golang: net/h…
first May 9, 2023 -
MediumALSA-2023:2202 1 CVE
Moderate: frr security, bug fix, and enhancement update
FRRouting is free software that manages TCP/IP based routing protocols. It supports BGP4, OSPFv2, OSPFv3, ISIS, RIP, RIPng, PIM, NHRP, PBR, EIGRP and BFD. The following packages have been upgraded to a later upstream version: frr (8.3.1). (BZ#2129731) Securit…
first May 9, 2023 -
Medium max 7.5ALSA-2023:2177 1 CVE
Moderate: grafana-pcp security and enhancement update
The Grafana plugin for Performance Co-Pilot includes datasources for scalable time series from pmseries and Redis, live PCP metrics and bpftrace scripts from pmdabpftrace, as well as several dashboards. Security Fix(es): * golang: net/http: handle server erro…
first May 9, 2023 -
Medium max 7.5ALSA-2023:2166 3 CVEs
Moderate: freeradius security and bug fix update
FreeRADIUS is a high-performance and highly configurable free Remote Authentication Dial In User Service (RADIUS) server, designed to allow centralized authentication and authorization for a network. Security Fix(es): * freeradius: Information leakage in EAP-…
first May 9, 2023 -
High max 8.1ALSA-2023:2148 40 CVEs
Important: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * use-after-free in l2cap_connect and l2cap_le_connect_req in net/bluetooth/l2cap_core.c (CVE-2022…
first May 9, 2023 -
High max 7.8ALSA-2023:2074 1 CVE
Important: emacs security update
GNU Emacs is a powerful, customizable, self-documenting text editor. It provides special code editing features, a scripting language (elisp), and the capability to read e-mail and news. Security Fix(es): * emacs: command injection vulnerability in org-mode (C…
first May 2, 2023 -
High max 7.4ALSA-2023:1880 7 CVEs
Important: java-11-openjdk security update
The java-11-openjdk packages provide the OpenJDK 11 Java Runtime Environment and the OpenJDK 11 Java Software Development Kit. Security Fix(es): * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) * OpenJDK: Swing HTML pars…
first Apr 19, 2023 -
High max 7.9
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock inside snd_ctl_elem_read to prevent UAF (CVE-2023-0266) * …
first Mar 27, 2023 -
Medium max 5.3ALSA-2023:2283 2 CVEs
Moderate: skopeo security and bug fix update
The skopeo command lets you inspect images from container image registries, get images and image layers, and use signatures to create and verify files. Security Fix(es): * golang: net/http: excessive memory growth in a Go server accepting HTTP/2 requests (CVE…
first May 9, 2023 -
Medium max 5.3ALSA-2023:2282 2 CVEs
Moderate: podman security and bug fix update
The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fix(es): * golang: net/http: excessive memory growth in a …
first May 9, 2023 -
MediumALSA-2023:2260 7 CVEs
Moderate: gstreamer1-plugins-good security update
GStreamer is a streaming media framework based on graphs of filters which operate on media data. The gstreamer1-plugins-good packages contain a collection of well-supported plug-ins of good quality and under the LGPL license. Security Fix(es): * gstreamer-plu…
first May 9, 2023 -
MediumALSA-2023:2259 1 CVE
Moderate: poppler security and bug fix update
Poppler is a Portable Document Format (PDF) rendering library, used by applications such as Evince. Security Fix(es): * poppler: integer overflow in JBIG2 decoder using malformed files (CVE-2022-38784) For more details about the security issue(s), including t…
first May 9, 2023 -
Medium max 8.8ALSA-2023:2257 6 CVEs
Moderate: tigervnc security and bug fix update
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is …
first May 9, 2023 -
High max 8.8ALSA-2023:2256 22 CVEs
Important: webkit2gtk3 security and bug fix update
WebKitGTK is the port of the portable web rendering engine WebKit to the GTK platform. Security Fix(es): * webkitgtk: use-after-free issue leading to arbitrary code execution (CVE-2022-42826) * webkitgtk: memory corruption issue leading to arbitrary code exec…
first May 9, 2023 -
Medium max 7.5ALSA-2023:2193 2 CVEs
Moderate: butane security, bug fix, and enhancement update
Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition. The following packages have been upgraded to a later upstream version: butane (0.16.0). (BZ#2135475) Security Fix(es):…
first May 9, 2023 -
Medium max 6.5ALSA-2023:2162 2 CVEs
Moderate: qemu-kvm security, bug fix, and enhancement update
Kernel-based Virtual Machine (KVM) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm packages provide the user-space component for running virtual machines that use KVM. The following packages have been upgraded to a late…
first May 9, 2023 -
High max 5.3ALSA-2023:2078 1 CVE
Important: libwebp security update
The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange…
first May 2, 2023 -
High max 7.4ALSA-2023:1879 7 CVEs
Important: java-17-openjdk security and bug fix update
The java-17-openjdk packages provide the OpenJDK 17 Java Runtime Environment and the OpenJDK 17 Java Software Development Kit. Security Fix(es): * OpenJDK: improper connection handling during TLS handshake (8294474) (CVE-2023-21930) * OpenJDK: Swing HTML pars…
first Apr 19, 2023 -
Medium max 7.0ALSA-2024:10869 5 CVEs
Moderate: redis:7 security update
Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and sorted sets. For performance, Redis works with an in-memory data set. You can persist it either by dumping the da…
first Dec 5, 2024 -
Medium max 7.8ALSA-2024:10274 3 CVEs
Moderate: kernel security update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: bpf: Fix overrunning reservations in ringbuf (CVE-2024-41009) * kernel: USB: serial: mos7840: fix crash on resume (CVE-2024-42244) * kernel: cxl/…
first Nov 26, 2024 -
Medium max 7.5ALSA-2023:2312 1 CVE
Moderate: jackson security update
Jackson is a suite of data-processing tools for Java, including the flagship streaming JSON parser / generator library, matching data-binding library, and additional modules to process data encoded in various other data formats. Security Fix(es): * jackson-da…
first May 9, 2023 -
Medium max 7.5ALSA-2023:2258 1 CVE
Moderate: python-mako security update
Mako is a template library written in Python. It provides a familiar, non-XML syntax which compiles into Python modules for maximum performance. Security Fix(es): * python-mako: REDoS in Lexer class (CVE-2022-40023) For more details about the security issue(s…
first May 9, 2023 -
Medium max 8.8ALSA-2023:2248 9 CVEs
Moderate: xorg-x11-server security and bug fix update
X.Org is an open-source implementation of the X Window System. It provides the basic low-level functionality that full-fledged graphical user interfaces are designed upon. Security Fix(es): * xorg-x11-server: buffer overflow in _GetCountedString() in xkb/xkb.…
first May 9, 2023 -
Medium max 7.0ALSA-2023:2234 1 CVE
Moderate: sysstat security and bug fix update
The sysstat packages provide the sar and iostat commands. These commands enable system monitoring of disk, network, and other I/O activity. Security Fix(es): * sysstat: arithmetic overflow in allocate_structures() on 32 bit systems (CVE-2022-39377) For more d…
first May 9, 2023 -
Medium max 6.7ALSA-2023:2179 5 CVEs
Moderate: libguestfs-winsupport security update
The libguestfs-winsupport package adds support for Windows guests to libguestfs, a set of tools and libraries allowing users to access and modify virtual machine (VM) disk images. Security Fix(es): * ntfs-3g: heap-based buffer overflow in ntfsck (CVE-2021-467…
first May 9, 2023 -
High max 7.5ALSA-2023:2165 5 CVEs
Important: edk2 security, bug fix, and enhancement update
EDK (Embedded Development Kit) is a project to enable UEFI support for Virtual Machines. This package contains a sample 64-bit UEFI firmware for QEMU and KVM. Security Fix(es): * openssl: X.400 address type confusion in X.509 GeneralName (CVE-2023-0286) * edk…
first May 9, 2023 -
Medium max 6.5ALSA-2023:1701 1 CVE
Moderate: curl security update
The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, and LDAP. Security Fix(es): * curl: HTTP multi-header compression denial of service (CVE-2023-23916) For more d…
first Apr 11, 2023 -
High max 7.8ALSA-2023:1592 1 CVE
Important: tigervnc security update
Virtual Network Computing (VNC) is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is …
first Apr 4, 2023 -
High max 9.8ALSA-2023:1591 1 CVE
Important: pcs security update
The pcs packages provide a command-line configuration system for the Pacemaker and Corosync utilities. Security Fix(es): * webpack: avoid cross-realm objects (CVE-2023-28154) For more details about the security issue(s), including the impact, a CVSS score, ac…
first Apr 4, 2023 -
High max 7.9
Important: kernel-rt security and bug fix update
The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fix(es): * kernel: tun: avoid double free in tun_free_netdev (CVE-2022-4744) * ALSA: pcm: Move rwsem lock i…
first Mar 27, 2023 -
High max 10.0ALSA-2026:77690 16 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: ipvlan: Make the addrs_lock be per port (CVE-2026-23103) * kernel: KVM: SEV: Require in-GHCB scratch area if GHCB v2+ is in use (CVE-2026-53360) …
first Oct 7, 2026 -
High max 9.2ALSA-2026:77018 2 CVEs
Important: python3.14 security update
Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to vario…
first Oct 6, 2026 -
High max 7.5ALSA-2026:75581 1 CVE
Important: mod_auth_openidc security update
The mod_auth_openidc is an OpenID Connect authentication module for Apache HTTP Server. It enables an Apache HTTP Server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server. Security Fix(es): * mod_auth_openidc: mod_auth_openidc: De…
first Oct 5, 2026 -
High max 9.3ALSA-2026:75576 2 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: net: mana: Fix TOCTOU double-fetch of hwc_msg_id from DMA buffer (CVE-2026-64034) * kernel: dm-integrity: don't increment hash_offset twice (CVE-…
first Oct 5, 2026 -
High max 8.8ALSA-2026:75570 11 CVEs
Important: freerdp security update
FreeRDP is a free implementation of the Remote Desktop Protocol (RDP), released under the Apache license. The xfreerdp client can connect to RDP servers such as Microsoft Windows machines, xrdp, and VirtualBox. Security Fix(es): * FreeRDP: freerdp-proxy: Free…
first Oct 5, 2026 -
High max 8.7ALSA-2026:74442 1 CVE
Important: libpcap security update
The libpcap packages provide a portable framework for low-level network monitoring. The libpcap library provides network statistics collection, security monitoring, and network debugging. Security Fix(es): * libpcap: libpcap: Out-of-bounds read and write vuln…
first Oct 1, 2026 -
High max 8.8ALSA-2026:73998 2 CVEs
Important: gvfs security update
GVFS is the GNOME Desktop Virtual File System layer that allows users to easily access local and remote data using File Transfer Protocol (FTP), Secure Shell File Transfer Protocol (SFTP), Web Distributed Authoring and Versioning (WebDAV), Common Internet Fil…
first Sep 30, 2026 -
High max 10.0ALSA-2026:73130 44 CVEs
Important: thunderbird security update
Mozilla Thunderbird is a standalone mail and newsgroup client. Security Fix(es): * firefox: thunderbird: Privilege escalation in the DOM: Workers component (CVE-2026-16365) * firefox: thunderbird: Sandbox escape in the Remote Settings Client component (CVE-20…
first Sep 29, 2026 -
High max 9.3ALSA-2026:72624 10 CVEs
Important: kernel security, bug fix, and enhancement update
The kernel packages contain the Linux kernel, the core of any Linux operating system. Security Fix(es): * kernel: KVM: nSVM: Raise #UD if unhandled VMMCALL isn't intercepted by L1 (CVE-2026-46076) * kernel: ext4: fix e4b bitmap inconsistency reports (CVE-2026…
first Sep 28, 2026 -
Critical max 9.8ALSA-2026:72279 8 CVEs
Critical: ipa security, bug fix, and enhancement update
AlmaLinux Identity Management (IdM) is a centralized authentication, identity management, and authorization solution for both traditional and cloud-based enterprise environments. Security Fix(es): * ipa: FreeIPA: Unauthenticated DoS in `/ipa/i18n_messages` vi…
first Sep 28, 2026